Abstract
This paper presents a Criterion-Based Role-Based Access Control model in which secure permissions (SP), secure operations (SOp), secure objects (SOb), and secure users (SU) are introduced. The security criterion expressions (SCE) embedded in SOb work as locks and the common elements of the security criterion subsets (SCSS) in SOp and SU work as keys. To support web-based applications, the remote secure user-role assignment is done based on user's digital credential(s), and Compact-Secure-Role-SCSS cookies are adopted to simplify the subsequent transactions. The multilayer access control is achieved by actuating locks with the relevant keys. The proposed model, an extension of traditional RBAC, efficiently supports both multilayer access control and non-multilayer access control on the web.
Talk to us
Join us for a 30 min session where you can share your feedback and ask us any queries you have
Schedule a callDisclaimer: All third-party content on this website/platform is and will remain the property of their respective owners and is provided on "as is" basis without any warranties, express or implied. Use of third-party content does not indicate any affiliation, sponsorship with or endorsement by them. Any references to third-party content is to identify the corresponding services and shall be considered fair use under The CopyrightLaw.
